FARONICS DEVICE FILTER MAC User manual

Getting Started
Document Overview
is document provides step-by-step instructions for installing Device Filter Mac on a single segment
Local Area Network. Following these instructions will allow you to have Device Filter Mac installed
and running within a few minutes. is document is not a substitute for the user guide!
Device Filter Mac Resources
User guides, video tutorials, white papers, and other documentation on Device Filter Mac are available
in the Faronics Content Library at http://www.faronics.com/library.
What is Device Filter Mac?
Device Filter Mac is a driver-level application that allows an administrator to designate and manage
which devices and removable media are able to connect to individual workstations. ese connections
include USB, FireWire, CD/DVD, LAN ethernet, wireless ethernet, modem, Bluetooth and IR (infra-
red.) Device Filter Mac appears as a program preference pane within the OS X System Preferences.
Administrators also have the option to allow prohibited devices on a one-time-only basis or timed basis,
or, with Firewire and USB media, to set a maximum storage-size limit. Device Filter administrators
can also track connection activity for any monitored device or connection via the Device Filter Mac
preference pane or the application’s user-specified activity log file.
Device Filter Mac can be managed at the workstation level or remotely via Apple Remote Desktop
(ARD).
System Requirements
Device Filter Mac requires Mac OS X Panther v10.3.0 - 10.3.9 or Tiger v10.4.1 and up. ARD integration
requires Apple Remote Desktop version 2.2 or later. A minimum of 256 MB of RAM is recommended.
Device Filter Mac is a Universal application and supports Intel- and PPC-based Macs.
Installing Device Filter Mac
Installation and configuration of Device Filter requires administrative access.
Device Filter is distributed on a CD-ROM in a media package, or as a downloadable file via the
Internet.
To install Device Filter on a single computer, complete the following steps:
e computer requires a restart to complete the installation.
1. Double-click the file Device Filter.pkg to begin the installation process. (Depending on the
configuration, the file extension may not be visible.)
2. Follow the steps presented, and read and accept the license agreement.
3. Click Install and Device Filter is installed on the computer as a preference pane accessible in
System Preferences.
e computer requires a restart to complete the installation.

Getting Started
Using the Device Filter Preference Pane
e Device Filter Preference Pane is used to control how devices and interfaces connect to the computer.
Within the preference pane, there are seven tabs to give an administrator control over digital and
video cameras, CD/DVD drives, USB, FireWire, Ethernet (LAN and wireless), modems, Bluetooth
modems and the infra-red port. Administrators can also control whether or not the Device Filter
menu icon appears and whether device/interface activity is to be logged for future reference. Finally,
an administrator can also view the ongoing activity log file, add/edit/delete Device Filter users, check
for program updates and uninstall Device Filter.
To access the Device Filter Preference Pane, open the System Preferences panel from the Apple menu.
Device Filter is listed under Other. Click the Device Filter icon to load the preference pane.
Creating the First Device Filter User
Unless you specified a first user prior to installation from within the Device Filter Assistant, the first
Device Filter user will have to be set up the first time the preference pane is accessed.
When the lock in the lower le corner is clicked for the first time, a dialog appears. Enter a User Name
and Password, verify the password, and click OK.
Start Tab
e Start tab is where Device Filter can be enabled, and a number of other options including “stealth
mode” (whether or not the Device Filter menu bar icon appears), digital/video camera and CD/DVD
control can be configured.
Check the Enable Device Filter option to activate its controls.
To hide the visual presence of Device Filter from the user, check the Hide Enabled Icon in menu bar
and/or Hide Disabled Icon in menu bar options.
To allow cameras or video cameras, check the preferred option.
To allow users to access CDs and DVDs in either Read Only or Read/Write modes, check the preferred
option. ese options refer to both internal and external CD/DVD drives.
FireWire Tab
e FireWire tab configures how a FireWire (IEEE 1394) device can be mounted on a computer.
To disallow FireWire devices from mounting or to choose whether devices can be mounted as either
Read Only or Read/Write, select the preferred option.
If a certain maximum size of FireWire device is required, input the preferred size (in GB) in the field
provided.
To log FireWire device activity, check the Log Activity option. is log is displayed in the Logging tab
of the preference pane and within the activity log file at the location specified in the Logging tab.
USB Tab
e USB tab configures how a USB device can be mounted on a computer.
To disallow USB devices from mounting or to choose whether devices can be mounted as either Read
Only or Read/Write, select the preferred option.
If a certain maximum size of USB device is required, input the preferred size (in MB) in the field
provided.
To log USB device activity, check the Log Activity option. is log is displayed in the Logging tab of
the preference pane and within the activity log file at the location specified in the Logging tab.

Getting Started
Network Tab
e Network tab configures what network settings and connections are enabled on the workstation.
Choose from the following options to designate what network settings and connections will be enabled
on a computer:
•LAN Ethernet
•Wireless
•Modem
•Bluetooth
•IR (Infra-red) Port: if this option is chosen, a restart is required for it to become enabled/
disabled
To log Network connection activity, check the Log Activity option. is log is displayed in the Logging
tab of the preference pane and the activity log file.
Admin Tab
e Admin tab is for enabling specific authorization options for storage devices.
To enable an otherwise disallowed device for one-time use only, check Enable One-Time Device
Mounting.
To enable an otherwise disallowed device for a specified amount of time, check Enable Time-limited
access.
If either the above options are configured,a dialog box will appear when a disallowed device is connected
to the workstation. e user must enter a Device Filter username and password to continue.
For timed-access, a number of minutes must be entered into the corresponding field to authorize the
device. A warning will appear to the user two minutes before the timed-access is set to expire.
Logging Tab
e Logging tab allows administrators to view the activity of the specified devices/connections and
to designate other logging options. If the Log Activity option is chosen on the FireWire, USB, and/or
Network tabs, the Logging tab displays this activity.
e logging data can be viewed either from within the tab or via a Device Filter activity log file.
To choose the name of the activity log file and the location where the file will be written (if this was not
pre-determined by using the Device Filter Assistant), click Choose, enter a file name and browse to the
preferred save location.
To combine entries which have logged the same date, action, user and device (thus making the log file
smaller), click Condense.
Users Tab
e Users tab is used to track all Device Filter users (those who are authorized to administer the
program.) A maximum of four Device Filter users are permitted.

Getting Started
Using Device Filter Mac
Device Filter Mac Icons
When Device Filter is installed, the Device Filter icon will appear in the menu bar.
e Enabled icon indicates that Device Filter control is active.
e Disabled icon indicates that Device Filter control is deactivated.
Check for Software Updates
To check if the installed version of Device Filter is the most current one, click the gear icon
and choose “Check for Updates…”
Your default browser will load with a page stating if your version is up to date or if there is a more
current one available for download.
Alternatively, you can check to see if you are running the most current version of Device Filter Mac via
the checkForUpdates task in Apple Remote Desktop.
Uninstalling Device Filter
To uninstall Device Filter, click the gear icon .
In the dialog that appears click Uninstall to proceed. e computer will need to be restarted to complete
the uninstall process.
To prevent the uninstall from happening, click Cancel.
All existing configurations will be permanently deleted when Device Filter Mac is
uninstalled.
Contact Faronics
Free technical support is available to you during your evaluation period. Contact our Technical Support
department at 800-943-6422 or through http://www.faronics.com/support.
For further product, pricing, and ordering information, please contact the Customer Service
Department at [phone] or by email at [email protected]m.
A complete listing of all Faronics soware for Macintosh computers is on our Mac index page at:
http://www.faronics.com/mac.